Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2208925A90CE71445AA0ADFCD7036DB9E45A21EE.cer
File:                     2208925A90CE71445AA0ADFCD7036DB9E45A21EE.cer (raw, json)
Hash identifier:          O/QWkn3DIFfYTNFwTdOjY9jcYuuPHEGtv7pZfpCRAr0=
Subject key identifier:   22:08:92:5A:90:CE:71:44:5A:A0:AD:FC:D7:03:6D:B9:E4:5A:21:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F104026F5BFDC9D1FC81E014B9DBAEE732E7F73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/2208925A90CE71445AA0ADFCD7036DB9E45A21EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Nov 2023 13:32:47 +0000
Certificate not after:    Mon 18 Nov 2024 13:37:47 +0000
Subordinate resources:    AS: 28128
                          IP: 168.195.32.0/22
                          IP: 187.19.48.0/20
                          IP: 2804:3458::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:10:40:26:f5:bf:dc:9d:1f:c8:1e:01:4b:9d:ba:ee:73:2e:7f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 20 13:32:47 2023 GMT
            Not After : Nov 18 13:37:47 2024 GMT
        Subject: CN=2208925A90CE71445AA0ADFCD7036DB9E45A21EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:27:93:62:5a:a2:6b:74:68:d4:33:9e:48:
                    9e:88:81:c5:b9:5d:a5:28:0d:24:e9:f8:2b:b3:ce:
                    25:c9:b0:39:99:17:df:c5:a0:e3:d2:9f:9d:dd:a1:
                    31:0b:33:a5:96:ff:29:ba:0f:b9:cd:e3:ac:47:b4:
                    75:30:04:cb:5f:fc:eb:67:b6:f7:d4:d3:f0:26:b4:
                    bb:d9:30:79:23:9e:d1:c1:e9:f1:47:41:92:04:ae:
                    fc:fb:ea:5b:4c:68:af:dd:8b:ab:92:37:64:cd:9d:
                    45:a4:32:28:f8:76:c9:77:32:07:45:be:7b:cd:ec:
                    39:37:c7:75:ce:eb:cc:f6:4d:e0:96:05:86:90:9e:
                    d9:d0:31:dc:38:e7:ad:ad:4a:e1:60:ec:19:e4:60:
                    09:cf:81:20:7d:55:30:c5:3e:f5:13:06:c5:22:fc:
                    16:60:dd:da:bd:23:ae:44:12:92:dc:6d:87:83:62:
                    c9:ec:8d:52:ee:85:82:86:62:4e:d8:7e:69:2c:61:
                    c5:05:ab:f7:cd:d7:d4:ee:35:d3:e2:19:1f:b4:41:
                    71:a6:1d:8b:c0:90:dd:15:65:71:38:0f:8b:53:66:
                    61:05:7c:90:34:7b:a4:25:1f:1b:09:b8:75:73:1e:
                    ba:be:54:19:e7:ab:50:19:c9:21:e4:bf:3a:e3:d4:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:08:92:5A:90:CE:71:44:5A:A0:AD:FC:D7:03:6D:B9:E4:5A:21:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/2208925A90CE71445AA0ADFCD7036DB9E45A21EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.32.0/22
                  187.19.48.0/20
                IPv6:
                  2804:3458::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28128

    Signature Algorithm: sha256WithRSAEncryption
         45:a9:4a:77:4b:9f:1d:33:dd:63:e8:b9:12:f7:91:c5:4e:93:
         14:a9:14:93:3f:81:da:c2:45:83:79:65:ab:3a:85:34:3d:fc:
         70:6f:10:a3:73:9b:0f:77:0f:28:6d:e3:df:c6:e3:f6:6e:41:
         09:0d:e8:c9:2e:53:30:df:d4:70:23:68:a9:28:b3:32:40:e9:
         e9:41:02:72:c5:b5:55:fb:bd:61:d7:1f:f6:5b:83:dc:fe:50:
         cd:b3:66:92:d7:79:6c:8a:b4:bd:a0:4c:8f:9d:eb:79:f9:1c:
         ec:e5:eb:15:56:c0:96:e3:5b:a0:6e:dd:ea:03:44:d0:da:cc:
         cc:bd:08:2f:66:e1:6f:fa:39:53:e4:88:20:2e:eb:25:c0:95:
         f3:c2:be:91:40:d3:d8:df:c6:2c:44:13:ba:f6:48:d2:35:c1:
         ba:f1:e5:87:56:2e:2a:54:77:12:8f:b5:2a:22:32:44:f9:1c:
         bd:c4:d8:eb:63:b4:48:17:44:c4:7d:a7:c8:f1:16:07:3d:80:
         d5:0b:0c:20:38:61:00:40:dd:80:29:54:79:fd:14:9d:7b:07:
         6c:54:f6:05:53:80:26:37:3b:b5:10:34:32:ba:4c:4f:3c:ae:
         53:6b:dd:35:39:ec:64:76:db:fc:29:39:d6:bb:65:ee:5f:ef:
         5e:4d:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org